Fix deprecated zsh option: initExtra -> initContent

home/default.nix

@@ -66,6 +66,7 @@
   services.gpg-agent = {
     enable = true;
     enableSshSupport = true;
+    pinentry.package = pkgs.pinentry-curses;  # terminal PIN prompt for YubiKey
   };
 
   # Allow unfree packages

home/modules/shell.nix

@@ -14,7 +14,7 @@
       save = 10000;
     };
 
-    initExtra = ''
+    initContent = ''
       bindkey '^R' history-incremental-search-backward
       bindkey '^S' history-incremental-search-forward
 

nixos/default.nix

@@ -5,6 +5,7 @@
     ./modules/system.nix
     ./modules/development.nix
     ./modules/shell.nix
+    ./modules/yubikey.nix
   ];
 
   # ============================================
@@ -17,6 +18,8 @@
     curl
     vim
     htop
+    home-manager
+    usbutils
   ];
 
   # Allow unfree packages

nixos/modules/system.nix

@@ -12,7 +12,7 @@
     # Users
     users.users.eliaskohout = {
       isNormalUser = true;
-      extraGroups = [ "wheel" "docker" ];
+      extraGroups = [ "wheel" "docker" "plugdev" ];
       shell = pkgs.zsh;
     };
 

nixos/modules/yubikey.nix

@@ -0,0 +1,36 @@
+{ pkgs, ... }:
+
+{
+  # Create the plugdev group (required for user-space USB access to YubiKey)
+  users.groups.plugdev = {};
+
+  # Enable PC/SC daemon — required for GPG smartcard (gpg --card-status) and YubiKey
+  services.pcscd.enable = true;
+
+  # udev rules so the YubiKey gets plugdev group ownership and correct permissions
+  services.udev.packages = with pkgs; [
+    yubikey-personalization
+    libu2f-host
+  ];
+
+  # Give pcscd access to the YubiKey CCID USB interface (interface 1 on FIDO+CCID devices)
+  services.udev.extraRules = ''
+    SUBSYSTEM=="usb", ATTRS{idVendor}=="1050", ATTRS{idProduct}=="0406", MODE="0666"
+  '';
+
+  # CCID driver for smartcard access
+  # NixOS's services.pcscd.plugins does not populate /var/lib/pcsc/drivers,
+  # so we symlink the ifd-ccid.bundle from the ccid package directly.
+  system.activationScripts.pcscdSetup = ''
+    mkdir -p /var/lib/pcsc/drivers
+    rm -rf /var/lib/pcsc/drivers/ifd-ccid.bundle 2>/dev/null || true
+    ln -sf "${pkgs.ccid}/pcsc/drivers/ifd-ccid.bundle" /var/lib/pcsc/drivers/ifd-ccid.bundle
+  '';
+
+  # YubiKey management tools
+  environment.systemPackages = with pkgs; [
+    yubikey-manager          # ykman CLI
+    yubikey-personalization  # ykpers / ykchalresp
+    yubico-piv-tool          # PIV applet management
+  ];
+}